Enterprise Windows Lock Screen Customization

images.jpg

[fusion_text]Lately we have been attempting to reign in the personal customization of Corporate Resources, not because of being authoritative but to provide a unified presence. Initially we were just going to do the computers that are "Public", such as digital signage, conference rooms, but being that it had a great reception we decided to go all the way through all computers. In our case, we have some legacy XP machines and then a mixture of Windows 7\8. Each OS has it's own process, albeit similar

Windows XP:

Create WMI Filter for GPO:
  1. Open the Group Policy Editor and proceed to WMI Filters:
  2. Create a new Filter, I titled mine "Lockscreen - Windows XP"
    1. Namespace: rootCIMv2
    2. Query: select * from Win32_OperatingSystem where (Version like "5.1%") and ProductType="1"
Create the GPO:
  1. Create and Link a GPO to the OU Where the workstations reside.I called mine Lockscreen - Windows XP so that as you create them for the other OS's it's easy to know which is which.
  2. Go to: Computer Config \ Preferences \ Windows Settings \ Files
    1. Create a File Action with the following information
    2. Action: Replace
    3. Source: the Network or Accessible location for the original BMP File. ( *** Must be a BMP file for XP ***)
    4. Destination: Local location. I tend to put everything for the company in c:\COMPANY. In this case I also made the filename Lockscreen.bmp so that it is always overwritten as it's changed thus not filling up the HD.
    5. In order to apply the the LockScreen you need to add a registry setting.
      1. Action: Update
      2. Hive: HK_Users
      3. Key Path: .DEFAULT\Control Panel\Desktop
      4. Value Name: Wallpaper
      5. Value Type: REG_SZ
      6. Value Data: Path in step 2d for the local file

Windows 7:

Create WMI Filter for GPO:
  1. Open the Group Policy Editor and proceed to WMI Filters:
  2. Create a new Filter, I titled mine "Lockscreen - Windows 7"
    1. Namespace: rootCIMv2
    2. Query: select * from Win32_OperatingSystem where (Version like "6.1%") and ProductType="1"
Create the GPO:
  1. Create and Link a GPO to the OU Where the workstations reside.I called mine Lockscreen - Windows XP so that as you create them for the other OS's it's easy to know which is which.
  2. Go to: Computer Config \ Preferences \ Windows Settings \ Files
    1. Create a File Action with the following information
    2. Action: Replace
    3. Source: the Network or Accessible location for the original PNG or JPEG
    4. Destination:c:\windows\system32\oobe\Info\Backgrounds\backgroundDefault.jpg The path is critical here in Windows 7. It has to be the above location and the file name has to be as stated.
    5. Now we have to enable the "OEM Background" by creating a registry item under WIndows Settings.
      1. Action: Update
      2. Hive: HKEY_LOCAL_MACHINE
      3. Key Path: SOFTWARE\Microsoft\Windows\CurrentVersion
      4. Value Name: OEMBackground
      5. Value Type: REG_DWORD
      6. Value Data: 00000001
      7. Base: Hex

Windows 8:

Create the GPO:
  1. Create and Link a GPO to the OU Where the workstations reside.I called mine Lockscreen - Windows 8 so that as you create them for the other OS's it's easy to know which is which.
    1. Go to: Computer Config \ Preferences \ Windows Settings \ Files
    2. Create a File Action with the following information
    3. Action: Replace
    4. Source: the Network or Accessible location for the original PNG File.
    5. Destination: Local location. I tend to put everything for the company in c:\COMPANY. In this case I also made the filename Lockscreen.PNG so that it is always overwritten as it's changed thus not filling up the HD.
    6. Computer Config \ Policies \ Admin Templates \ Control Panel \ Personalization
      1. Configure "Force a specific default lock screen image" to Enabled with the path mentioned above
        1. Personally I also chose to enable "prevent Changing Lock Screen Image as well. This stops the end user from also switching it.
        2. Another optional setting I also chose to implement was changing the start menu background color. In our case we are trying to go for a "look" or image. By default it would be setup however the user had set it up. Thus your image could be a black background with white lettering. If they have an alternate monitor and the end user selected purple you would have your LOGO with a purple screen vice something that "flowed". In this case you can:
          1. Computer Config \ Policies \ Admin Templates \ Control Panel \ Personalization
          2. Select Force a specific background and accent color. You can use HEX codes to set a matching color.
          3. Secondly I sent to Force a specific Start Background. Either pick the same matching color, or chose 20 for transparent so it uses the desktop.

[/fusion_text]